Analysis Authorization x S_RS_COMP

[Former Member]

Hi guys,

Does anybody know if using the Analysis Authorization concept, the object S_RS_COMP is mandatory in PFCG

We create a AA with:

- The relevant authorization object is only for 0COMP_CODE.

- The Technical objects are 0TCAIPROV (InfoProvider),  0TCAACTVT (Activity),  0TCAKYFNM (Key Figures), 0TCAVALID (Validation).

I expected do not use the S_RS_COMP in PFCG... but after executing the query, the message says not authorized S_RS_COMP = REP.

Thanks for any help!

Carlos

[KodandaPani_KV · Accepted solution]

Hi,

msg clearly saying add the S_RS_COMP manually.

select  the role -> change the mode add the manually S_RS_COMP

after adding select the 03,05 as per the client requirement.

Thanks,

Phani.

[Former Member · Accepted solution]

Thanks for the reply Kodanda!

The problem is to manage the authorization via PFCG.

I would like to manage via RSECADMIN by DSOs and S_RS_COMP overwritte the RSECADMIN authorization, because we have (activity, infoarea, infocube, key figures and validation).

They are all the objects we expected to authorize via RSECADMIN.

If you have anything to add about this i would appreciate.

Thanks!

[KodandaPani_KV · Accepted solution]

HI.

you can perform the all activity about authorization TX- RSECADMIN

please look at the below doc useful for you

i wrote the one more doc about authorization please find my content page " sap bw authorizations"

Thanks,

Phani.

[abdullahqureshi]

Hi Carlos,

I would like to suggest you have to create two single roles and one composite role. In first single role assign all the required things there including S_RS_COMP in authorization tab. In second single role assign only your Analysis Authorization object by putting there S_RS_AUTH. Now create one composite role in which use both single roles there and assign your user there and perform user comparison.Now check it using RSECADMIN -> Analysis -> Execution as -> user id and also tick with log. If there is any error you can check it by its log.

Regards,
Abdullah

[former_member186399]

Dear Carlos,

To add on, Authorisation object is one among the BI authorization which is used to control at

infocube level, Characteristics level, Characteristics Value level, Key Figure level, hierarchy Node Level . This authorization object is then assigned to S_RS_AUTH.

S_RS_AUTH is then assigned as a part of Role in BI. Apart from this you need to maintain other RS related to BW authorization like  S_RS_COMP, S_RS_COMP1 etc

Regards

Gajesh